use interface to send syslog messages
This commit is contained in:
parent
b470e3896b
commit
5050e500fe
@ -31,9 +31,6 @@ allow init_t init_var_run_t:file { create getattr read append write setattr unli
|
|||||||
allow init_t initrc_t:process transition;
|
allow init_t initrc_t:process transition;
|
||||||
allow init_t initrc_exec_t:file { getattr read execute };
|
allow init_t initrc_exec_t:file { getattr read execute };
|
||||||
|
|
||||||
# Create unix sockets
|
|
||||||
allow init_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };
|
|
||||||
allow init_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };
|
|
||||||
allow init_t self:fifo_file { read write ioctl };
|
allow init_t self:fifo_file { read write ioctl };
|
||||||
|
|
||||||
kernel_transition_from(init_t,init_exec_t)
|
kernel_transition_from(init_t,init_exec_t)
|
||||||
@ -68,6 +65,8 @@ corecommands_chroot(init_t)
|
|||||||
corecommands_execute_general_programs(init_t)
|
corecommands_execute_general_programs(init_t)
|
||||||
corecommands_execute_system_programs(init_t)
|
corecommands_execute_system_programs(init_t)
|
||||||
|
|
||||||
|
logging_send_system_log_message(init_t)
|
||||||
|
|
||||||
selinux_read_config(init_t)
|
selinux_read_config(init_t)
|
||||||
|
|
||||||
miscfiles_read_localization(init_t)
|
miscfiles_read_localization(init_t)
|
||||||
@ -243,6 +242,8 @@ files_manage_pseudorandom_saved_seed(initrc_t)
|
|||||||
corecommands_execute_general_programs(initrc_t)
|
corecommands_execute_general_programs(initrc_t)
|
||||||
corecommands_execute_system_programs(initrc_t)
|
corecommands_execute_system_programs(initrc_t)
|
||||||
|
|
||||||
|
logging_send_system_log_message(initrc_t)
|
||||||
|
|
||||||
selinux_read_config(initrc_t)
|
selinux_read_config(initrc_t)
|
||||||
selinux_read_default_contexts(run_init_t)
|
selinux_read_default_contexts(run_init_t)
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user